CRIME New E-Mail harvesting technique - Friendgreetings.com

From: brvarin@private
Date: Wed Oct 30 2002 - 07:23:04 PST

  • Next message: Shaun Savage: "CRIME Crypto API and IPSec merged into Linux 2.5"

    Another site for you all to add to your firewall filters....
    
    friendgreetings.com
    surprisecards.net
    
    They tell you up front that they are going to spam everyone in
    your address book....if you bother to read the EULA....Which no one does.
    
     http://www.theregister.co.uk/content/6/27794.html
    
    
     http://online.securityfocus.com/news/1350
    
    "Small touches like the convincing domain name and the authentic digital
    certificate make the ruse
    smarter than the average covert adware delivery mechanism. "A lot of
    people see that it's an
    authentic certificate... and will just mindlessly click okay,"
    
    
    Brian Varine, GCIA, CISSP
    Regence Blue Cross/Blue Shield
    IT Security Compliance
    503-553-1425
    
    ===========================================================================
    IMPORTANT NOTICE: This communication, including any attachment, contains
    information that may be confidential or privileged, and is intended solely
    for the entity or individual to whom it is addressed.  If you are not the
    intended recipient, you should delete this message and are hereby notified
    that any disclosure, copying, or distribution of this message is strictly
    prohibited.  Nothing in this email, including any attachment, is intended
    to be a legally binding signature.
    



    This archive was generated by hypermail 2b30 : Wed Oct 30 2002 - 08:03:42 PST